This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: mNQZ+4C7i46mN3voLsLs2FcGt3HKjVrJSgQqMD+aqVk=
Subject key identifier: 62:CE:68:E9:DC:C9:26:A2:AA:4B:F8:E8:C0:57:CA:40:7C:CA:AE:B2
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 033D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 0326
Signing time: Sun 25 Jan 2026 00:21:47 +0000
Manifest this update: Sun 25 Jan 2026 00:21:47 +0000
Manifest next update: Sun 01 Feb 2026 00:21:47 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: mnLYEyDB85ZIJJdKt4Cq3HqXfAPiWfpjWGCT8jnWgFw=)
2: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: gPhfTgtKlx4wmH5qoiWguK/Xx1pbfFOHbMckJ1VrL+Q=)
3: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: j8sJFdaGh5hoT/OlB8BepmWR8CssCrYtB82PMaTll9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Jan 25 00:21:47 2026 GMT
Not After : Feb 1 00:21:47 2026 GMT
Subject: CN=6975621b-481b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:61:af:97:0c:80:76:91:ef:fb:91:25:13:
df:d4:c6:9f:4b:b6:28:34:11:67:ad:2b:40:af:1f:
24:6c:3f:83:99:c1:2c:69:f2:68:d9:96:dc:8d:28:
ff:3c:b5:bd:45:0f:dd:6f:55:50:6e:af:e6:23:f1:
02:76:d1:ef:80:42:b8:fb:db:ec:b8:85:bb:d7:bd:
70:19:9c:cf:0c:c0:cd:cb:0e:21:ab:60:00:d4:f1:
41:f7:17:d4:88:76:44:ee:6c:f9:4f:10:3d:5d:4b:
6f:66:bf:99:5e:40:d2:91:01:c0:6c:c8:6d:51:ce:
51:31:43:41:7b:5b:7f:6d:2c:c6:11:48:a8:9d:06:
a4:00:40:b1:f7:3f:af:d7:fa:74:62:59:e4:1d:f5:
36:3e:b3:ec:4d:a2:2d:87:04:4b:f5:19:94:70:2e:
ff:23:bc:f2:d8:d5:10:a0:a5:f8:38:d0:e1:d1:c2:
24:67:59:7d:40:9a:26:9c:41:b4:47:31:36:56:04:
cf:14:35:49:b6:8d:98:91:c5:7f:54:d2:5b:84:f2:
91:f1:ad:41:91:aa:c6:c6:83:19:e2:2d:de:c2:61:
41:50:cd:71:07:e6:45:c5:1d:6b:5f:a1:14:65:49:
0c:fb:80:47:21:fc:83:24:e3:b7:5b:95:94:c0:f3:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CE:68:E9:DC:C9:26:A2:AA:4B:F8:E8:C0:57:CA:40:7C:CA:AE:B2
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:35:84:98:69:ee:e6:14:8b:34:3b:15:b7:9b:90:4c:49:d5:
b1:36:b7:5f:55:de:01:01:cc:dc:a2:29:ae:52:81:b0:bb:bb:
77:23:40:1a:58:7e:70:10:6f:e0:63:34:d9:0e:4d:b1:b1:c1:
fe:49:4b:68:f3:76:63:a6:50:10:be:4d:e6:2d:7d:63:e9:71:
5e:12:e4:6a:1e:33:bb:ec:f7:7d:62:24:c4:7e:34:a7:db:a2:
69:76:ad:fb:50:1f:13:d3:4a:dc:95:33:8e:da:6b:5b:e3:4e:
5b:18:80:8c:b2:f1:ea:fa:a0:84:1e:eb:e8:01:be:2a:dd:49:
86:4b:aa:c6:f1:f0:d2:a4:52:f2:dd:96:a2:08:2a:ce:6a:02:
20:39:e2:bb:1e:99:46:95:22:0b:13:98:b2:6e:a7:13:42:34:
ce:c3:22:96:47:e2:9d:61:3b:6f:a7:25:f4:ad:86:0a:a1:8a:
af:11:91:07:ac:bb:39:bd:95:58:82:7e:7a:01:b1:7a:6b:cb:
23:24:d3:8b:0c:30:f7:e6:a4:2d:97:7f:98:e9:38:02:2c:6c:
41:ca:a8:d0:74:7c:4c:f0:5c:c0:5b:33:41:d3:69:23:27:14:
d5:70:39:f1:98:00:46:98:fb:4d:7e:02:83:86:0c:e9:10:46:
db:2d:cd:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1
QkEwMzkzNTUwHhcNMjYwMTI1MDAyMTQ3WhcNMjYwMjAxMDAyMTQ3WjAYMRYwFAYD
VQQDDA02OTc1NjIxYi00ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7Zhr5cMgHaR7/uRJRPf1MafS7YoNBFnrStArx8kbD+DmcEsafJo2ZbcjSj/
PLW9RQ/db1VQbq/mI/ECdtHvgEK4+9vsuIW7171wGZzPDMDNyw4hq2AA1PFB9xfU
iHZE7mz5TxA9XUtvZr+ZXkDSkQHAbMhtUc5RMUNBe1t/bSzGEUionQakAECx9z+v
1/p0YlnkHfU2PrPsTaIthwRL9RmUcC7/I7zy2NUQoKX4ONDh0cIkZ1l9QJomnEG0
RzE2VgTPFDVJto2YkcV/VNJbhPKR8a1BkarGxoMZ4i3ewmFBUM1xB+ZFxR1rX6EU
ZUkM+4BHIfyDJOO3W5WUwPPbMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLOaOnc
ySaiqkv46MBXykB8yq6yMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2
NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEVCMi83QUM3NjdERTA2NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3
Ny0xazIzRGVVY2Rib0RrMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPNYSYae7mFIs0OxW3m5BMSdWxNrdfVd4BAczcoimuUoGwu7t3I0Aa
WH5wEG/gYzTZDk2xscH+SUto83ZjplAQvk3mLX1j6XFeEuRqHjO77Pd9YiTEfjSn
26Jpdq37UB8T00rclTOO2mtb405bGICMsvHq+qCEHuvoAb4q3UmGS6rG8fDSpFLy
3ZaiCCrOagIgOeK7HplGlSILE5iybqcTQjTOwyKWR+KdYTtvpyX0rYYKoYqvEZEH
rLs5vZVYgn56AbF6a8sjJNOLDDD35qQtl3+Y6TgCLGxByqjQdHxM8FzAWzNB02kj
JxTVcDnxmABGmPtNfgKDhgzpEEbbLc0S
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:59:56 2026 by rpki-client